Files
insomnia/.github/workflows/release-recurring.yml
Ryan Willis 05d15b4abf securely wrap execution (#8451)
* test using a wrapper that sets security context before invoking the main application

* add build step to pr ci

* try with diff ver string

* statically link the standard libraries for portability

* more static linking

* prior version string

* remove pr substring from version

* try using a different version string
2025-03-25 08:57:53 -07:00

91 lines
2.8 KiB
YAML

name: Release Recurring
# This workflow bakes executables of the major platforms for Testing purposes
on:
merge_group:
workflow_dispatch:
push:
branches:
- develop
pull_request:
types:
- opened
- synchronize
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
env:
PR_NUMBER: ${{ github.event.number }}
jobs:
build-and-upload-artifacts:
timeout-minutes: 15
# Skip jobs for release PRs
# windows on recurring should be portable
if: ${{ !startsWith(github.head_ref, 'release/') }}
runs-on: ${{ matrix.os }}
strategy:
fail-fast: false
matrix:
include:
- os: macos-latest-large
build-targets: zip
- os: windows-latest
build-targets: portable
- os: ubuntu-22.04
build-targets: tar.gz
- os: ubuntu-22.04-arm
build-targets: tar.gz
steps:
- name: Checkout branch
uses: actions/checkout@v4
- name: Setup Node
uses: actions/setup-node@v4
with:
node-version-file: ".nvmrc"
cache: 'npm'
cache-dependency-path: package-lock.json
- name: Install packages
run: npm ci
- name: Bump version
shell: bash
run: npm --workspaces version prerelease --preid="alpha-pr-$(git rev-parse --short HEAD)" --no-git-tag-version
- name: Package
shell: bash
run: NODE_OPTIONS='--max_old_space_size=6144' BUILD_TARGETS='${{ matrix.build-targets }}' npm run app-package
- name: Verify secure wrapper (Windows)
if: ${{ matrix.os == 'windows-latest' }}
shell: bash
run: NODE_OPTIONS='--max_old_space_size=6144' ./build-secure-wrapper.sh
# See https://github.com/electron/electron/issues/42510#issuecomment-2171583086
- if: ${{ runner.os == 'Linux' }}
name: Lift unprivileged user namespace restrictions
run: sudo sysctl kernel/apparmor_restrict_unprivileged_userns=0
- name: Test critical path on packaged electron app
run: npm run test:crit:package
env:
INSOMNIA_UPDATES_URL: http://localhost:4010
- name: Upload smoke test traces
uses: actions/upload-artifact@v4
if: failure()
with:
if-no-files-found: ignore
name: ${{ matrix.os }}-package-critical-test-traces-${{ github.run_number }}
path: packages/insomnia-smoke-test/traces
- name: Upload artifacts
uses: actions/upload-artifact@v4
with:
if-no-files-found: ignore
name: ${{ matrix.os }}-artifacts-${{ github.run_number }}
path: |
packages/insomnia/dist/*.exe
packages/insomnia/dist/*.tar.gz
packages/insomnia/dist/*.zip